News for hackers. Stuff that matters.
Re:BeGoneAds – A Python script that blocks ads by installing... by sh-run on Monday June 10, 2019 @04:54PM (#20150753)
Above you mentioned setting this up as a scheduled job. In this case the job would need to run as root (or you'd need to assign the appropriate permissions in the sudoers file, but people are lazy). If a non-root user had write privileges to the file, they could modify the script and thereby gain root code execution.

Naturally it's on the user to properly configure the permissions.

I'm not saying this isn't a worthy project, I'm just adding to the discussion on why people should be cautious when running scripts with root permissions.

There are no comments on this comment yet.